NETWORK APPARATUS FOR SECURE REMOTE ACCESS AND CONTROL

• US 20070300291A1
• Filed: 05/15/2007
• Published: 12/27/2007
• Est. Priority Date: 06/19/2006
• Status: Active Grant

• Current Assignee: BeyondTrust Corp.
• Original Assignee: BeyondTrust Software, Inc. (BeyondTrust Corp.)
• Inventors: Bomgaars, Joel, Sleevi, Ryan, Ngo, Huey, McNeill, Nathan, Durham, David, Cross, Jeremy
• Granted Patent: US 9,621,559 B2
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: H04L 12/2856 Access arrangements, e.g. Internet access asynchronous transfer mode networks H04L12/5601; broadband local area networks H04L12/2801; optical access or distribution networks H04Q11/0067; access to open networks H04L12/5691; digital subscriber line end-user equipment and bit-level processing of data on a PSTN-based network H04M11/00; home network gateways H04L12/2834; wireless access networks H04W
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network

Abstract

A network appliance is designed and configured to communicate over a data network and to provide secure on-demand remote access and control of a computing system in the context of remote support.

Claims

1. A method comprising:

logging onto a network appliance by a first system; and

establishing secure communication sessions, respectively, with the first system and a second system via the network appliance, wherein the network appliance is configured to provide remote access and control, by the first system, of the second system over the secure communication sessions.

2. A method according to claim 1, wherein the network appliance is housed in a single encasement including a rack-mountable housing.

3. A method according to claim 1, wherein the remote access and control is provided by the network appliance on an on-demand basis.

4. A method according to claim 1, wherein the secure communication session with the second system is initiated outbound towards the network appliance.

5. A method according to claim 1, wherein the network appliance is collocated with either the first system or the second system, the network appliance being configurable by the first system.

6. A method according to claim 1, wherein the first system is associated with a representative and the second system is associated with a customer, the method further comprising:

establishing a support session that is initiated by the second system over the secure communication sessions, wherein the support session permits an agent of the representative to provide remote support functions to the customer.

7. A method according to claim 6, further comprising:

transmitting, by the network appliance, a first software to the first system and a second software to the second system for establishment of the support session, wherein the second software automatically uninstalls upon termination of the support session.

8. A method according to claim 1, wherein the network appliance restricts control and access to the second system according to a profile corresponding to the first system.

9. A method according to claim 1, further comprising:

establishing a secure communication session with a third system, wherein the network appliance queues a service request by the second system and another service request by the third system for handling by the first system.

10. A method according to claim 1, wherein the network appliance is a virtual appliance.

11. A method according to claim 1, wherein the network appliance is further configured to provide remote access and control by the second system of the first system during secure communication sessions.

12. An apparatus comprising:

a processor configured to communicate with a first system;

a plurality of communication interfaces coupled to the processor and configured to establish secure communication sessions, respectively, with the first system and a second system via the network appliance; and

a memory configured to store instructions for execution by the processor for providing remote access and control, by the first system, of the second system over the secure communication sessions.

13. An apparatus according to claim 12, further comprising:

a rack-mountable housing containing the processor, the communication interfaces and the memory.

14. An apparatus according to claim 12, wherein the remote access and control is provided on an as needed basis.

15. An apparatus according to claim 12, wherein the secure communication session with the second system is initiated outbound towards the apparatus.

16. An apparatus according to claim 12, wherein the apparatus is collocated with either the first system or the second system, the memory being further configured to store configuration information for the apparatus as specified by the first system.

17. An apparatus according to claim 12, wherein the first system is associated with a representative and the second system is associated with a customer, the processor being further configured to establish a support session that is initiated by the second system over the secure communication sessions, wherein the support session permits an agent of the representative to provide remote support functions to the customer.

18. An apparatus according to claim 17, wherein the communication interfaces are further configured to, respectively, transmit a first software to the first system and a second software to the second system for establishment of the support session, the second software automatically uninstalling upon termination of the support session.

19. An apparatus according to claim 12, wherein the memory is further configured to store a profile corresponding to the second system, the profile providing restrictions on control and access to the second system.

20. An apparatus according to claim 12, wherein a secure communication session is established with a third system, and the memory is further configured to queue a service request by the second system and another service request by the third system for handling by the first system.

21. An apparatus according to claim 12, wherein the network appliance is a virtual appliance.

22. An apparatus according to claim 12, wherein the memory is configured to store instructions for providing remote access and control by the second system of the first system during secure communication sessions.

23. A system comprising:

a network appliance configured to securely communicate with a representative system and a plurality of customer systems over a data network,

wherein the network appliance is further configured to provide remote access and control, by the representative system, of the customer systems over the data network.

24. A system according to claim 23, wherein the secure communication is initiated outbound by one of the customer systems to the network appliance.